This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f6/a037b1-133a-4639-8c7f-636857ee1792/1/ES1lq7x-8AUScohER5KrhvsVwu4.mft File: ES1lq7x-8AUScohER5KrhvsVwu4.mft (raw, json) Hash identifier: RXb7kKtCL+/QOE1vopd5XTsyq/bqXbfNGXnP748hcFs= Subject key identifier: D4:D2:74:4A:27:BC:B3:25:90:A2:39:3E:95:BC:78:43:8C:E1:5B:55 Authority key identifier: 11:2D:65:AB:BC:7E:F0:05:12:72:88:44:47:92:AB:86:FB:15:C2:EE Certificate issuer: /CN=112d65abbc7ef005127288444792ab86fb15c2ee Certificate serial: 019C438FE114F1DE46040A0B11AC770F9B1B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ES1lq7x-8AUScohER5KrhvsVwu4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f6/a037b1-133a-4639-8c7f-636857ee1792/1/ES1lq7x-8AUScohER5KrhvsVwu4.mft Manifest number: 0993 Signing time: Mon 09 Feb 2026 18:00:28 +0000 Manifest this update: Mon 09 Feb 2026 18:00:28 +0000 Manifest next update: Tue 10 Feb 2026 18:00:28 +0000 Files and hashes: 1: ES1lq7x-8AUScohER5KrhvsVwu4.crl (hash: lQvjXS8YAnqtQssAYsVpOiZ5GJeoLWaObgaqKoHBkIw=) 2: NyqJ3HcC-3DqTRjPEZHaf1vVpmk.roa (hash: kzMbI7FhKbCR9OfECdQk1NAYRQo9Ic9dt4s+QetZXtQ=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f6/a037b1-133a-4639-8c7f-636857ee1792/1/ES1lq7x-8AUScohER5KrhvsVwu4.crl rsync://rpki.ripe.net/repository/DEFAULT/f6/a037b1-133a-4639-8c7f-636857ee1792/1/ES1lq7x-8AUScohER5KrhvsVwu4.mft rsync://rpki.ripe.net/repository/DEFAULT/ES1lq7x-8AUScohER5KrhvsVwu4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:43:8f:e1:14:f1:de:46:04:0a:0b:11:ac:77:0f:9b:1b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=112d65abbc7ef005127288444792ab86fb15c2ee Validity Not Before: Feb 9 18:00:28 2026 GMT Not After : Feb 10 18:00:28 2026 GMT Subject: CN=d4d2744a27bcb32590a2393e95bc78438ce15b55 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:90:1d:60:e7:ba:6a:fe:76:95:34:4e:e4:9c: a1:29:13:cb:eb:c1:be:2d:48:eb:43:da:f4:7e:bc: 42:e8:b5:32:68:a7:90:b0:89:f1:07:9c:86:9b:c6: e3:e0:c8:97:28:17:46:2a:fb:bd:33:9e:f3:74:a9: a1:32:e6:7a:cd:c7:19:58:4c:36:0c:a4:49:e0:18: 53:b6:55:5f:84:98:be:c0:6b:f7:71:05:61:85:88: 29:18:97:ed:7b:66:c5:dc:6a:44:5f:85:c6:61:2f: 9f:26:4d:62:04:7f:17:84:e3:e3:53:6a:a7:2f:1c: 70:7f:a4:d9:0e:13:33:47:60:e3:9c:75:c3:e1:ef: 28:ce:55:e3:d3:53:fe:35:d2:16:48:9a:50:90:71: a3:c8:bc:4e:6b:a4:19:dc:d6:6d:c5:e5:df:cc:35: a4:be:52:2d:31:8e:b5:0b:af:0c:21:5b:ee:f8:f0: b1:a2:a0:a0:21:35:2f:b9:81:ec:81:ad:06:fb:7f: 05:31:d2:fb:8d:2b:8e:ec:60:e8:d1:79:00:fb:16: fc:1a:e3:72:f4:86:17:76:34:2a:d0:2f:78:c4:0f: b5:3a:f9:43:14:1e:1f:9b:71:51:8f:28:bc:61:b7: b6:47:b7:0a:e5:af:78:9d:0f:5f:58:ef:bc:82:b0: 98:d9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D4:D2:74:4A:27:BC:B3:25:90:A2:39:3E:95:BC:78:43:8C:E1:5B:55 X509v3 Authority Key Identifier: keyid:11:2D:65:AB:BC:7E:F0:05:12:72:88:44:47:92:AB:86:FB:15:C2:EE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ES1lq7x-8AUScohER5KrhvsVwu4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/a037b1-133a-4639-8c7f-636857ee1792/1/ES1lq7x-8AUScohER5KrhvsVwu4.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/a037b1-133a-4639-8c7f-636857ee1792/1/ES1lq7x-8AUScohER5KrhvsVwu4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a3:e3:08:eb:88:87:1a:d2:4a:29:a6:68:9d:da:0f:1b:ae:65: 0a:df:84:7b:3e:26:9e:f9:b7:09:c3:f7:51:32:85:eb:fd:3d: d2:68:4a:0b:e0:cb:d9:b6:e2:bb:1e:c5:87:0c:c3:90:e9:5c: b2:5c:0f:db:ae:38:12:c0:cf:1d:1d:b3:81:75:21:83:b1:76: b5:6f:73:08:31:58:01:95:34:c4:2b:f1:30:8c:81:f5:c1:d4: 34:3b:de:f3:d2:bb:b3:90:02:87:a9:ca:5e:fa:5a:87:eb:2b: 2a:d3:e8:90:96:1d:28:e9:c8:d1:18:aa:9d:38:3b:94:2a:b8: 4e:35:01:8e:cb:95:71:43:d2:a6:9c:d2:85:32:de:7d:50:1c: f6:5b:a6:4a:b3:2e:0d:e4:48:04:b9:b6:0d:18:c2:49:ed:74: fd:36:12:1e:96:4e:68:3d:13:c8:d0:fa:ac:ee:38:c2:9e:86: cd:67:c0:b7:55:a3:01:b7:ee:9f:0a:d2:47:ab:59:30:b6:df: f0:31:7e:05:5b:20:66:74:98:41:5a:8e:a3:8f:2b:e7:db:b1: 22:70:88:00:9d:74:ff:f2:af:38:c4:a9:b4:ee:a4:09:02:d3: 65:79:ef:56:98:87:dd:a4:8a:dc:06:52:07:ba:1d:04:03:42: 09:55:2f:22 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZxDj+EU8d5GBAoLEax3D5sbMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDExMmQ2NWFiYmM3ZWYwMDUxMjcyODg0NDQ3OTJhYjg2ZmIx NWMyZWUwHhcNMjYwMjA5MTgwMDI4WhcNMjYwMjEwMTgwMDI4WjAzMTEwLwYDVQQD EyhkNGQyNzQ0YTI3YmNiMzI1OTBhMjM5M2U5NWJjNzg0MzhjZTE1YjU1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxpAdYOe6av52lTRO5JyhKRPL68G+ LUjrQ9r0frxC6LUyaKeQsInxB5yGm8bj4MiXKBdGKvu9M57zdKmhMuZ6zccZWEw2 DKRJ4BhTtlVfhJi+wGv3cQVhhYgpGJfte2bF3GpEX4XGYS+fJk1iBH8XhOPjU2qn Lxxwf6TZDhMzR2DjnHXD4e8ozlXj01P+NdIWSJpQkHGjyLxOa6QZ3NZtxeXfzDWk vlItMY61C68MIVvu+PCxoqCgITUvuYHsga0G+38FMdL7jSuO7GDo0XkA+xb8GuNy 9IYXdjQq0C94xA+1OvlDFB4fm3FRjyi8Ybe2R7cK5a94nQ9fWO+8grCY2QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFNTSdEonvLMlkKI5PpW8eEOM4VtVMB8GA1UdIwQY MBaAFBEtZau8fvAFEnKIREeSq4b7FcLuMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRVMxbHE3eC04QVVTY29oRVI1S3JodnNWd3U0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mNi9hMDM3YjEtMTMzYS00NjM5LThjN2Yt NjM2ODU3ZWUxNzkyLzEvRVMxbHE3eC04QVVTY29oRVI1S3JodnNWd3U0Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mNi9hMDM3YjEtMTMzYS00NjM5LThjN2YtNjM2ODU3ZWUxNzky LzEvRVMxbHE3eC04QVVTY29oRVI1S3JodnNWd3U0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAo+MI64iH GtJKKaZondoPG65lCt+Eez4mnvm3CcP3UTKF6/090mhKC+DL2bbiux7FhwzDkOlc slwP2644EsDPHR2zgXUhg7F2tW9zCDFYAZU0xCvxMIyB9cHUNDve89K7s5ACh6nK Xvpah+srKtPokJYdKOnI0RiqnTg7lCq4TjUBjsuVcUPSppzShTLefVAc9lumSrMu DeRIBLm2DRjCSe10/TYSHpZOaD0TyND6rO44wp6GzWfAt1WjAbfunwrSR6tZMLbf 8DF+BVsgZnSYQVqOo48r59uxInCIAJ10//KvOMSptO6kCQLTZXnvVpiH3aSK3AZS B7odBANCCVUvIg== -----END CERTIFICATE-----Generated at Mon Feb 9 19:59:53 2026 by rpki-client